Analysis

  • max time kernel
    2815778s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    07/11/2023, 03:28

General

  • Target

    ae7e8cdda4abb74afb49da15ec606d031b2ba26a48cbbc77cc71dee9057b866d.apk

  • Size

    2.6MB

  • MD5

    e8998bb28804830649ad87c34ecc9dc0

  • SHA1

    a1cdb8e24d4e3160ad6296568a5e7b58313c7ff2

  • SHA256

    ae7e8cdda4abb74afb49da15ec606d031b2ba26a48cbbc77cc71dee9057b866d

  • SHA512

    2557b386ff7625bd7dc55fe2d0aae545986d2645f6a2d06f4d85c9317aaea81bcac4ab67dbf31b23db423eb337abd7ccbc2b1626f749f578bd0b0ce3dfb6ccb9

  • SSDEEP

    49152:H2FOp/cBT2DN3cycC7mhVlvZXukxOQgpWk9L53yJdT9cOuKo2qwUVmyl:WQp/cBT2B3pcC7mRmdzL5CJdTWr8o

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • diwix.gorbah.com
    1⤵
    • Acquires the wake lock.
    PID:4537
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4592

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      9d8473b0280a72c27c2c0a4f351c21de

      SHA1

      29aa4216cef8e4f00d5d52c0d3356cec76266094

      SHA256

      8105a6e44fff90011b191d095c207641baa0e86ef5c805804ddbd0f11b659fce

      SHA512

      0eeae82f3b21de5b104f5eca743a4dab2f28af9d0c33ec9b7c8df37c32b6abd09455237c0d1072f0fd93116e9f8aedb6bd41d3043d10f03da255d40128abadc7

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      3dc2715d990f54f207a131d50e2a85c0

      SHA1

      b6a6e018c4a6f257663eac92c552a4ebb10ee2b9

      SHA256

      9e8e96de0243aa7c0e7dce35587fae488f00d4a8bf9b392acce4eadea927d8ce

      SHA512

      bde43f7557d25b3a5e4ff0d95bfb9d2e485f73eda18bed5aa3e42e2256c2a1ca26e261255afd6fe8d99fcea6326c439e98175ea538d9a03188a9f4a2039fedda

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      28a080b2a08ba212c5e4037c2f7226d9

      SHA1

      ddc79a9b87b1bd85db63960e4ca2c11f1e5b575a

      SHA256

      5c7c8a651a8c21d683ec07a3fb5d9ba0b13ee0657e3beeb20015163233b9599d

      SHA512

      eb68146e4cc45990ba4dcdd7e4b6285301c8c9db9f5e38688cdc72d37cb76e3342b2194b674bc34dba2c05ca548ef31a4d7cbea3c1c15d538944feb8bc87e851

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      f480fa734a45fc0a1084b91406710be7

      SHA1

      452b882076be081d82a131dda6f7e4f1491613db

      SHA256

      708bea0aeb7833fee7f44d64377af31a531b78ba4c24c42d36eb5b6fbd754254

      SHA512

      dd8bfdbadaeaf944bd4c81ca0f380a6911401d3b789e59336e5cc5a4a9f368d6ba6efb63668b4900927fb8067962a7fae4945bfcba8c9017f75739804465a5c9

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      de82e2c94d2718988804b035a46d17b1

      SHA1

      705f5ff19093ad209f2a666085d6ccaed3bf58a4

      SHA256

      29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39

      SHA512

      68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d9cf75fdd1c2292d986f6c3d5d60f2c8

      SHA1

      07ecb1d3a26d952ae5fecf54f36699ab498510b1

      SHA256

      2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

      SHA512

      442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      df60b2fa915fa81025b987a8577379b1

      SHA1

      1c2de348a72e6dd216c678401ce6f0c2ba25e56e

      SHA256

      f93419ec12b398ddc4e08e951e812ed978bfb4beae1e626521476bc70afd38b6

      SHA512

      bce595951098e3a79b2e1fcf155dd9ead533deec737803ba300a70b8cefb33cf352be0b477a4f6d049e6104fe14e3d3b3d0118ff7b9d628fb0eb171bb3d9dcb2

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      3e2842ba0f19a4bc9c20ad42afcfec4f

      SHA1

      981e3fc38910fca3a966970ddf1ee26d582063ba

      SHA256

      000fbbdb04f61cdb435f2866d57cd3b290d4f7975ba511143917d6fd6da71b49

      SHA512

      ea2470c77172d33f150a62614d317e2363ee8fe4ae0a593bb789ebbecb50275654ca2017aa6d0ba1db6436d35e9a575eac72b18bf135681c6961dbf73e65e42c

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      d4efd4ed65a421fcd8d803253b1fe2e0

      SHA1

      4402e14b9d7f67919f202e1387ccb5c692ad2244

      SHA256

      59ff522d4b86c0868349f798c256620526a997307ba286838c0c77f9b9199fb8

      SHA512

      4a2901748ad364641f590052cfc8e819aa080c33cc4ac88f8f7febe80eb489295031713d5c14cf89a5b93f7ca181c0254af42da9545864bb9e1334b5b7dd16cc

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      9b35adf255c11949e39b995299643340

      SHA1

      0e082ea97c1953d366c1bc62db00aa25be7e8ffe

      SHA256

      0a2367188c9d7716a7aad0c73fe347041da32ad502f87f32541b08a8613b05f0

      SHA512

      8b051dfaf27d38616f2211af05727f5a2ab0b8e26efe55a880a2c854c4a0fd0351b3ffae2b465f2a06422c9aab04b6f38cc4fb566bc5e04cfa05b1dae225954b

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      8a0da7d03b6836454acf42533ce96ad8

      SHA1

      694d4789e9a1951652ae0574c8b85651b59d6c9a

      SHA256

      ee038310bc67b46a7db337f5b412ded6ac61157e4cced4ffabec160a2c2e9598

      SHA512

      1b13b521a485ba62a7e14e39951bf389badb507085a3b145752ec794f88ad6dc4bb43e5ff803307057366c2d2a7d44c6fa053fffff2d935c4a28d4f8709d6cdd

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      d7c4afff5939f4e35bb4061f046cbba8

      SHA1

      69a4d87b70a3aac51235ff55ba45ca7b9c492f03

      SHA256

      2cd82785da4f3f6f25100c73cd5dc46b5091b1a08e8ed206743afd8b85f4c3d7

      SHA512

      76cabc83e6fd32c0075b6733e7a96cc50dbb70343753a3c97cb0a6928893a4e86aa1497625caf5cc912662c7f732cb070900284ce54fb69584d7d6c4b7b41bab

    • /data/user/0/diwix.gorbah.com/files/PersistedInstallation2588721222315381690tmp

      Filesize

      90B

      MD5

      90e46d8060bd8654ab65bb6e1af06af2

      SHA1

      c680f2264d227b57eafb82b3baeecbad6c27ec89

      SHA256

      b7e625a05b6ccc0b360800f4a317fdb4e405fefc618efc51ffee421a096e37c2

      SHA512

      fdb353e1bb6171e5fc29aae74eabd97db90b94ac22667e0f3e3a0030582da14815f7f2138b7d1e0b0feb0d5bb8395fe1457c1af676a54548e1b6d661427ef2ec

    • /data/user/0/diwix.gorbah.com/files/PersistedInstallation5111504091982425880tmp

      Filesize

      570B

      MD5

      b5dc4eb9ef8122c410bcb5071269fb73

      SHA1

      a17b20d460492077a5516b3ae5e984485fe8920f

      SHA256

      5bd64ae5f630cba796dcb63809a325461c7dae8a33befdf27d33a05b182249f9

      SHA512

      884c893a368a6eb924e6da0ce1bbe766b8052de1305e06a0931ca28029c29d6856b0177a8ddbecdc7937cee7c25bc0b3e84e0d2b92c50b0dc40f051088a0e7f8